General
- Target 2026-04-21_c42679e5bd5145da1cdccd84185588c4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 23.0MB
- Sample260421-3gdkhahs8x
- SHA256 c873591167f29b3cc5336781989a70d2e3200b087f3cf646ea6f2446c019b76d
- MD5 c42679e5bd5145da1cdccd84185588c4
- SHA1 76bf681aac66fe62e3a94793ab2c9d63ca327640
- SHA512 a4819e0af5d0e954bc90c240e25635ecdcb416b24e0d1c99dd0f6eb4c92266c99db243b2e14b06077a0fee22f476aac27e506e2c400f13c84ee4957b86ecedfe
- SSDEEP 196608:IkopGnXhcI4/h1+V18UvGbLkopGnXhcI4/h1+V18UvGb/WqQI0py+:UGS+qGS+EWqQjp3
- TLSH T1FA377C17B2E440E8D0AAD174CB568636E7B27C154BB097DF5250B6992F33AD0BF3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_c42679e5bd5145da1cdccd84185588c4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_c42679e5bd5145da1cdccd84185588c4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_c42679e5bd5145da1cdccd84185588c4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 23.0MB
- SHA256 c873591167f29b3cc5336781989a70d2e3200b087f3cf646ea6f2446c019b76d
- MD5 c42679e5bd5145da1cdccd84185588c4
- SHA1 76bf681aac66fe62e3a94793ab2c9d63ca327640
- SHA512 a4819e0af5d0e954bc90c240e25635ecdcb416b24e0d1c99dd0f6eb4c92266c99db243b2e14b06077a0fee22f476aac27e506e2c400f13c84ee4957b86ecedfe
- SSDEEP 196608:IkopGnXhcI4/h1+V18UvGbLkopGnXhcI4/h1+V18UvGb/WqQI0py+:UGS+qGS+EWqQjp3
- TLSH T1FA377C17B2E440E8D0AAD174CB568636E7B27C154BB097DF5250B6992F33AD0BF3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry